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In the Claims 

Claims 1, 4-26, 28-30, 32-42, and 44-48 remain in the application and are 
listed below; 

1, (PREVIOUSLY PRESENTED) In a paging operating system 
having physical memory for holding information and secondary storage 
comprising a page file for receiving information that is paged out from the 
physical memory, a computer-implemented method of protecting information 
comprising: 

creating a key and page locking the key in the physical memory, wherein 
creating the key comprises creating the key during system boot up, wherein 
different keys can be created during different system boot ups; 

encrypting information using the key; and 

paging out, to the page file, the encrypted information. 

2-3. (CANCELED) 

4. (PREVIOUSLY PRESENTED) The computer-implemented 
method of claim 1, wherein said creating the key further comprises generating a 
random key with a random key generator. 

5. (ORIGINAL) The computer-implemented method of claim 4, 
wherein said generating comprises using RSA RC4 as an encryption algorithm to 
generate the key. 
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1 6. (ORIGINAL) The computer-implemented method of claim 1, 

2 wherein said encrypting comprises: 

3 calling an operating system kernel; 

4 the kernel using the page-locked key to encrypt the information. 

3 

6 7, (ORIGINAL) The computer-implemented method of claim 6, 

7 wherein said calling is performed by an application. 

8 

9 8. (ORIGINAL) The computer-implemented method of claim 6, 

10 wherein said calling is performed by an operating system memory manager, 
n 

12 9. (ORIGINAL) One or more computer-readable media having 

13 computer-readable instructions thereon which, when executed by a computer, 
H perform the computer-implemented method of claim 1 . 

15 

i6 10. (ORIGINAL) An operating system programmed with instructions 

n which, when implemented by the operating systenij implement the method of 

is claim 1. 

19 

20 11. (PREVIOUSLY PRESENTED) In a paging operating system 

2t having main memory for holding information and secondary storage comprising a 

22 page file for receiving information that is paged out from the main memory, a 

23 computer-implemented method of protecting information comprising: 

24 creating a key during system boot up, wherein different keys can be created 

25 during different system boot ups; 
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page-locking the key in main memory; 

restricting access to the page-locked key to only the operating system 

kernel; 

calling the operating system kernel to encrypt information; 
accessing the page-locked key with the operating system kernel; and 
using the operating system kernel to encrypt the information with the page- 
locked key- 

12. (ORIGINAL) The computer-implemented method of claim 11, 
10 wherein said calling is performed by an operating system memory manager. 
ii 

12 13* (ORIGINAL) The computer-implemented method of claim 11, 

13 wherein said calling is performed by an application. 

14 

t5 14. (ORIGINAL) The computer-implemented method of claim 11 

16 further comprising prior to said calling: 

it designating at least one page in the main memory with a designation; 

is recognizing the designation and, responsive thereto, calling the operating 

i9 system kernel to encrypt the information. 

20 

21 15, (ORIGINAL) The computer-implemented method of claim 14, 

22 wherein said recognizing is performed by the memory manager. 

23 
24 

25 
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16. (ORIGINAL) The computer-implemented method of claim 11, 
wherein said calling comprises specifying a memory location and a memory size 
associated with the information to be encrypted. 

17. (ORIGINAL) One or more computer-readable media having 
computer-readable instructions thereon which, when executed by a computer, 
perform the computer-implemented method of claim 11. 

18. (ORIGINAL) An operating system programmed with instructions 
which, when implemented by the operating system, implement the method of 
claim 1 1 . 

19. (PREVIOUSLY PRESENTED) In a paging operating system 
having main memory for holding information and secondary storage comprising a 
page file for receiving information that is paged out from the main memory, a 
computer-implemented method of handling encrypted information comprising: 

accessing encrypted information in the page file; and 

decrypting the encrypted information with a key created during system boot 
up, wherein different keys can be created during different system boot ups and 
wherein the key is page-locked in the main memory. 

20. (ORIGINAL) The computer-implemented method of claim 19 
further comprising placing the decrypted information in a page of main memory. 
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21. (ORIGINAL) The computer-implemented method of claim 19 
further comprising placing the decrypted information in a page-locked page of 
main memory. 

22. (ORIGINAL) The computer-implemented method of claim 19, 
wherein the page-locked key is accessible only to the operating system kernel. 

23. (ORIGINAL) One or more computer-readable media having 
computer-readable instructions thereon which, when executed by a computer, 
perform the computer-implemented method of claim 19. 

24. (ORIGINAL) An operating system programmed with instructions 
which, when implemented by the operating system, implement the method of 
claim 19* 

25. (PREVIOUSLY PRESENTED) In a paging operating system 
having main memory for holding information and secondary storage comprising a 
page file for receiving information that is paged out from the main memory, a 
computer-implemented method of protecting information comprising: 

allocating a non-pageable page of main memory during system boot; 

generating a random key, wherein different keys can be generated during 
different system boots; and 

storing the random key in the non-pageable page of main memory, the 
random key being configured for use by the operating system to encrypt 
information that might be paged out to the page file. 
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26. (ORIGINAL) The computer-implemented method of claim 25, 
wherein said generating comprises using an RSA RC4 encryption algorithm. 

27. (CANCELED) 

28. (ORIGINAL) One or more computer-readable media having 
computer-readable instructions thereon which, when executed by a computer, 
perform the computer-implemented method of claim 25. 

29. (ORIGINAL) An operating system programmed with instructions 
which, when implemented by the operating system, implement the method of 
claim 25. 

30. (PREVIOUSLY PRESENTED) In an operating system having 
main memory for holding information and secondary storage for receiving 
information that is transferred out of main memory, a computer-implemented 
method of protecting information comprising: 

generating at least one non-pageable random key by using a random key 
generation process during system boot up, wherein different keys can be generated 
during different system boot ups; 

encrypting at least one selected block of information in the main memory 
with a software component that uses the at least one random key for encryption; 

transferring the one encrypted block of information to the secondary 
storage; 
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decrypting the one encrypted block of information with the software 
component that uses the at least one random key for decryption; and 

placing the decrypted block of information in the main memory. 

31. (CANCELED) 

32. (ORIGINAL) The computer-implemented method of claim 30 
further comprising restricting access to the at least one random key to only the 
software component, 

33. (ORIGINAL) The computer-implemented method of claim 30, 
wherein the software component comprises the operating system's kernel. 

34. (ORIGINAL) The computer-implemented method of claim 30 
further comprising: 

storing the at least one random key in the main memory; and 
locking the at least one random key in the main memory so that it does not 
get transferred to the second storage. 

35. (ORIGINAL) An operating system programmed with instructions 
which, when implemented by the operating system, implement the method of 
claim 30, 

36. (PREVIOUSLY PRESENTED) A system for use in protecting 
pageable information comprising: 
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a memory having pageable and non-pageable pages; and 
at least one key created during system boot and stored in the memory in a 
non-pageable page, the key being configured for use in encrypting pageable 
information, wherein different keys can be created during different system boots. 

37. (ORIGINAL) The system of claim 36 further comprising a software 
component that is configured to access and use said one key to encrypt pageable 
information. 

38. (ORIGINAL) The system of claim 37> wherein the one key is 
accessible only to the software component. 

39. (ORIGINAL) The system of claim 37 further comprising at least 
one application configured to call the software component to encrypt the pageable 
information. 

40. (ORIGINAL) The system of claim 37 further comprising a memory 
manager configured to call the software component to encrypt the pageable 
information. 

4 1 . (PREVIOUSLY PRESENTED) A computer program embodied on 
one or more computer-readable media, the program comprising: 

creating a key and page locking the key in main memory of a computer, 
wherein creating the key comprises creating the key during system boot up, 
wherein different keys can be created during different system boot ups; 
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encrypting information with the key; 

paging out, to secondary storage, the encrypted information; 
accessing the encrypted information in the secondary storage; and 
decrypting the encrypted information with the key that is page-locked in the 
main memory. 

42. (PREVIOUSLY PRESENTED) A programmable computer 
comprising: 

a processor; 

main memory for holding information; 

secondary storage for receiving information that is temporarily transferred 
out of the main memory; 

the computer being programmed with computer-readable instructions 
which, when executed by the processor, cause the computer to: 

generate a key during system boot up, wherein different keys can be 
generated during different system boot ups; 

page lock the key in the main memory; 

encrypt information that is to be transferred to the secondary storage with 
the key; 

transfer the encrypted information to the secondary storage; and 
decrypt the encrypted information with a key that is locked in the main 
memory. 

43. (CANCELED) 
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44. (ORIGINAL) The programmable computer of claim 42, wherein 
the key that is used to encrypt the information is the same key that is used to 
decrypt the information. 

45- (ORIGINAL) The programmable computer of claim 42 3 further 
comprising a software component that is programmed to encrypt and decrypt the 
information. 

46. (ORIGINAL) The programmable computer of claim 45, wherein 
the software component comprises the operating system's kernel. 

47. (PREVIOUSLY PRESENTED) One or more application 
programming interfaces embodied on one or more computer-readable media for 
execution on a computer in conjunction with a paging operating system having 
main memory for holding information and a page file for receiving information 
that is paged out from the main memory, comprising: 

an interface method for generating a key during system boot up, wherein 
different keys can be generated during different system boot ups; 

an interface method for page . locking the key in the main memory, 
an interface method for encrypting pageable information with the key; and 
an interface method for decrypting encrypted information that is contained 
in the page file. 

48. (PREVIOUSLY PRESENTED) An application programming 
interface embodied on a computer-readable medium for execution on a computer 
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in conjunction with a paging operating system having main memory for holding 

2 information and secondary storage comprising a page file for receiving 

3 information that is paged out from the main memory, comprising a method for 

4 setting an attribute on a page of main memory, the attribute designating that the 

5 page must be encrypted with a key created during system boot up and page-locked 

6 in the main memory prior to the page being paged out to the page file, wherein 

7 different keys can be created during different system boot ups. 
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